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Amendments to the Claims : 
This listing of claims replaces all prior versions and listings of claims in the application: 

Listing of Claims : 

1-31 (Cancelled). 

32. (Previously Presented) A computer-implemented method for sharing a user's 
personal information with a merchant server so as to facilitate an e-commerce transaction in a 
networked computing environment, the method comprising: 

collecting personal information from a user of a computer network; 
storing the user's personal information in a server; 

associating, at the server, a session identifier with the user's personal information; 

receiving, at the server, a request from a merchant server for at least a portion of the 
user's personal information, wherein the request includes a session identifier; 

determining, at the server, that the received session identifier corresponds to the session 
identifier associated with the user's personal information; and 

sending, from the server, at least a portion of the user's personal information to the 
merchant server when the received session identifier corresponds to the session identifier 
associated with the personal information. 

33. (Previously Presented) The method of claim 32 wherein associating, at the server, 
a session identifier with the user's personal information comprises: 

receiving, at the server, information that authenticates the user; 
generating, at the server, the session identifier in response to the server receiving the 
information that authenticates the user; and 
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associating, at the server, the generated session identifier with the user's personal 
information. 

34. (Previously Presented) The method of claim 33 wherein the information that 
authenticates the user comprises a username and password such that receiving, at the server, 
information that authenticates the user comprises receiving, at the server, a username and 
password. 

35. (Previously Presented) The method of claim 33 further comprising sending, from 
the server, the generated session identifier to a client computer being used by the user. 

36. (Previously Presented) The method of claim 32 wherein the personal information 
comprises credit card information such that storing the user's personal information in a server 
comprises storing credit card information. 

37. (Previously Presented) The method of claim 36 wherein sending, from the server, 
at least a portion of the user's personal information to the merchant server comprises sending 
partial credit card information to the merchant server such that the merchant server can solicit 
confirmation from the user that a credit card account associated with the credit card information 
should be used to perform the e-commerce transaction. 

38. (Previously Presented) The method of claim 36 wherein sending, from the server, 
at least a portion of the user's personal information to the merchant server comprises sending full 
credit card information to the merchant server such that the merchant server can perform the e- 
commerce transaction using the credit card information. 

39. (Previously Presented) The method of claim 32 further comprising: 
receiving, at the server, a digital certificate from the merchant server; and 
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verifying the identity of the merchant server using the digital certificate. 

40. (Previously Presented) The method of claim 32 wherein the user's personal 
information includes one or more of the user's name, address, credit card information, telephone 
number, facsimile number, e-mail address, employer name, employer address, work telephone 
number, buying history, travel preferences, food preferences, medical information, and personal 
interests. 

41 . (Previously Presented) A device for sharing a user's personal information with a 
merchant server so as to facilitate an e-commerce transaction in a networked computing 
environment, the device comprising: 

means for collecting personal information from a user of a computer network; 
means for storing the user's personal information in a server; 
means for associating, at the server, a session identifier with the user's personal 
information; 

means for receiving, at the server, a request from a merchant server for at least a portion 
of the user's personal information, wherein the request includes a session identifier; 

means for determining, at the server, that the received session identifier corresponds to 
the session identifier associated with the user's personal information; and 

means for sending, from the server, at least a portion of the user's personal information to 
the merchant server when the received session identifier corresponds to the session identifier 
associated with the personal information. 

42. (Previously Presented) The device of claim 41 wherein the means for associating, 
at the server, a session identifier with the user's personal information comprises: 

means for receiving, at the server, information that authenticates the user; 
means for generating, at the server, the session identifier in response to the server 
receiving the information that authenticates the user; and 
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means for associating, at the server, the generated session identifier with the user's 
personal information. 

43. (Previously Presented) The device of claim 42 wherein the information that 
authenticates the user comprises a username and password such that the means for receiving, at 
the server, information that authenticates the user comprises means for receiving, at the server, a 
username and password. 

44. (Previously Presented) The device of claim 42 further comprising means for 
sending, from the server, the generated session identifier to a client computer being used by the 
user. 

45. (Previously Presented) The device of claim 41 wherein the personal information 
comprises credit card information such that the means for storing the user's personal information 
in a server comprises means for storing credit card information. 

46. (Previously Presented) The device of claim 45 wherein the means for sending, 
from the server, at least a portion of the user's personal information to the merchant server 
comprises means for sending partial credit card information to the merchant server such that the 
merchant server can solicit confirmation from the user that a credit card account associated with 
the credit card information should be used to perform the e-commerce transaction. 

47. (Previously Presented) The device of claim 45 wherein the means for sending, 
from the server, at least a portion of the user's personal information to the merchant server 
comprises means for sending full credit card information to the merchant server such that the 
merchant server can perform the e-commerce transaction using the credit card information. 

48. (Previously Presented) The device of claim 41 further comprising: 



Applicant 
Serial No. 
Filed 
Page 



Damian Saccocio 
09/693,860 
October 23, 2000 
6 of 7 



Attorney's Docket No.: 06975-062001 / Commerce 02 



means for receiving, at the server, a digital certificate from the merchant server; and 
means for verifying the identity of the merchant server using the digital certificate. 

49. (Previously Presented) The device of claim 41 wherein the user's personal 
information includes one or more of the user's name, address, credit card information, telephone 
number, facsimile number, e-mail address, employer name, employer address, work telephone 
number, buying history, travel preferences, food preferences, medical information, and personal 
interests. 



